solo-reddit

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external Reddit posts and comments, which could contain instructions aimed at manipulating the agent's behavior.
  • Ingestion points: Data is retrieved from reddit.com through scripts (check-post.sh, search-posts.sh) and Playwright browser snapshots.
  • Boundary markers: There are no explicit delimiters or instructions provided to the agent to isolate the ingested external text from its core instructions.
  • Capability inventory: The skill is configured with broad tool access, including Bash, Write, Edit, and multiple mcp__playwright__* tools for browser automation.
  • Sanitization: The skill lacks mechanisms for sanitizing or filtering Reddit content before it is processed by the agent.
  • [COMMAND_EXECUTION]: The skill executes provided local bash scripts (check-karma.sh, check-post.sh, search-posts.sh) to query Reddit's public API and process the resulting data using python3.
  • [EXTERNAL_DOWNLOADS]: The skill performs network operations to retrieve metadata and content from reddit.com, which is a well-known service.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 11:42 AM